/ip firewall mangle
add action=jump chain=prerouting comment="" disabled=no in-inte***ce=cnc \
jump-target=gamesdown
add action=jump chain=prerouting comment="" disabled=no in-inte***ce=tel \
jump-target=gamesdown2
add action=mark-packet chain=prerouting comment="" disabled=no in-inte***ce=\
tel new-packet-mark=tel_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no new-packet-mark=\
tel_up out-inte***ce=tel passthrough=yes
add action=mark-packet chain=forward comment="" disabled=no new-packet-mark=\
cnc_up out-inte***ce=cnc passthrough=no
add action=mark-connection chain=gamesdown comment="\B7\E7\D4\C6" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=2347
add action=mark-connection chain=gamesdown comment="\C4\A7\CA\DE\CA\C0\BD\E7" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=3724
add action=mark-connection chain=gamesdown comment="\CC\EC\C1\FA\B0\CB\B2\BF" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=3731-3736
add action=mark-connection chain=gamesdown comment="\B9\A6\B7\F2\CA\C0\BD\E7" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=5052
add action=mark-connection chain=gamesdown comment="\C4\A7\D3\F2\BC\A4\D5\BD" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=5816
add action=mark-connection chain=gamesdown comment="\D5\F7\CD\BE" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=6020
add action=mark-connection chain=gamesdown comment="\BD\A3\CF\C0\CA\C0\BD\E7" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=6047
add action=mark-connection chain=gamesdown comment="QQ\C8\FD\B9\FA" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
6299
add action=mark-connection chain=gamesdown comment="\B4\AB\C6\E62" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
7000,7100
add action=mark-connection chain=gamesdown comment="\B4\AB\C6\E63" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
7200-7205
add action=mark-connection chain=gamesdown comment="\CC\EC\CC\C32" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
7777
add action=mark-connection chain=gamesdown comment="\CE\CA\B5\C0" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=9012
add action=mark-connection chain=gamesdown comment="\B2\CA\BA\E7\B5\BA" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=10003
add action=mark-connection chain=gamesdown comment="\BD\D6\CD\B7\C0\BA\C7\F2" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=10011
add action=mark-connection chain=gamesdown comment="\C8\C8\D1\AA\BD\AD\BA\FE" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=13000
add action=mark-connection chain=gamesdown comment=CS disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=udp src-port=\
27005,27015,27016
add action=mark-connection chain=gamesdown comment="\B3\AC\BC\B6\CE\E8\D5\DF" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=15010
add action=mark-connection chain=gamesdown comment="\B7\E7\BB\F0\D6\AE\C2\C3" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=20001
add action=mark-connection chain=gamesdown comment="\BE\A2\CE\E8\CD\C5" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=25510-25530
add action=mark-connection chain=gamesdown comment="QQ\D2\F4\CB\D9" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
28008
add action=mark-connection chain=gamesdown comment=\
"\CD\EA\C3\C0\CA\C0\BD\E7\D6\EF\CF\C9,\C8\C8\CE\E8\C5\C9\B6\D3" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
29000
add action=mark-connection chain=gamesdown comment=\
"\B5\D8\CF\C2\B3\C7\D3\EB\D3\C2\CA\BF" disabled=no new-connection-mark=\
gamesdown passthrough=yes protocol=tcp src-port=10010-10060
add action=mark-connection chain=gamesdown comment="" disabled=yes \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=7103
add action=mark-connection chain=gamesdown comment=CF disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=10008
add action=mark-connection chain=gamesdown comment="" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=udp src-port=\
12010-12190
add action=mark-connection chain=gamesdown comment=QQ disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=udp src-port=8000
add action=mark-connection chain=gamesdown comment="QQ\EC\C5\CE\E8" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
31414
add action=mark-connection chain=gamesdown comment="QQ\B7\C9\B3\B5" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
39311
add action=mark-connection chain=gamesdown comment="\D1\B0\CF\C9" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=15002
add action=mark-connection chain=gamesdown comment="\D3\CE\CF\B72" disabled=\
no new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
38112
add action=mark-connection chain=gamesdown comment="\C3\CE\BB\C3\CE\F7\D3\CE" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=10616,22288
add action=mark-connection chain=gamesdown comment=winbox disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=8291
add action=mark-connection chain=gamesdown comment=\
"QQ\B6\D4\D5\BD\C6\BD\CC\A8" disabled=no new-connection-mark=gamesdown \
passthrough=yes protocol=udp src-port=1671
add action=mark-connection chain=gamesdown comment=\
"\BA\C6\B7\BD\B6\D4\D5\BD\C6\BD\CC\A8" disabled=no new-connection-mark=\
gamesdown passthrough=yes protocol=udp src-port=1509-1513
add action=mark-connection chain=gamesdown comment=QQbattle disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=udp src-port=\
7000,7100
add action=mark-connection chain=gamesdown comment="\BD\A3\CF\C0\C7\E9\D4\B5" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=6660-6672
add action=mark-connection chain=gamesdown comment=\
"\BD\A3\CF\C0\C7\E9\D4\B53" disabled=no new-connection-mark=gamesdown \
passthrough=yes protocol=tcp src-port=16763
add action=mark-connection chain=gamesdown comment="" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=udp src-port=16763
add action=mark-connection chain=gamesdown comment="" disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=tcp src-port=\
3112-3115
add action=mark-connection chain=gamesdown comment="\B7\E2\C9\F1\B0\F12" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=8888
add action=mark-connection chain=gamesdown comment="\B4\F3\BB\B0\CE\F7\D3\CE" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=tcp \
src-port=3488
add action=mark-connection chain=gamesdown comment="\B4\F3\CC\C6\B7\E7\D4\C6" \
disabled=no new-connection-mark=gamesdown passthrough=yes protocol=udp \
src-port=31001
add action=mark-connection chain=gamesdown comment=icmp disabled=no \
new-connection-mark=gamesdown passthrough=yes protocol=icmp
add action=mark-packet chain=gamesdown comment="" connection-mark=gamesdown \
disabled=no new-packet-mark=games_down_p passthrough=no
add action=mark-packet chain=prerouting comment="" disabled=no in-inte***ce=\
cnc new-packet-mark=cnc_down passthrough=no
add action=mark-connection chain=gamesdown2 comment="\B7\E7\D4\C6" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
2347
add action=mark-connection chain=gamesdown2 comment=\
"\C4\A7\CA\DE\CA\C0\BD\E7" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=3724
add action=mark-connection chain=gamesdown2 comment=\
"\CC\EC\C1\FA\B0\CB\B2\BF" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=3731-3736
add action=mark-connection chain=gamesdown2 comment=\
"\B9\A6\B7\F2\CA\C0\BD\E7" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=5052
add action=mark-connection chain=gamesdown2 comment=\
"\C4\A7\D3\F2\BC\A4\D5\BD" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=5816
add action=mark-connection chain=gamesdown2 comment="\D5\F7\CD\BE" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
6020
add action=mark-connection chain=gamesdown2 comment=\
"\BD\A3\CF\C0\CA\C0\BD\E7" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=6047
add action=mark-connection chain=gamesdown2 comment="QQ\C8\FD\B9\FA" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=6299
add action=mark-connection chain=gamesdown2 comment="\B4\AB\C6\E62" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
7000,7100
add action=mark-connection chain=gamesdown2 comment="\B4\AB\C6\E63" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
7200-7205
add action=mark-connection chain=gamesdown2 comment="\CC\EC\CC\C32" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
7777
add action=mark-connection chain=gamesdown2 comment="\CE\CA\B5\C0" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
9012
add action=mark-connection chain=gamesdown2 comment="\B2\CA\BA\E7\B5\BA" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=10003
add action=mark-connection chain=gamesdown2 comment=\
"\BD\D6\CD\B7\C0\BA\C7\F2" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=10011
add action=mark-connection chain=gamesdown2 comment=\
"\C8\C8\D1\AA\BD\AD\BA\FE" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=13000
add action=mark-connection chain=gamesdown2 comment=CS disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=udp src-port=\
27005,27015,27016
add action=mark-connection chain=gamesdown2 comment=\
"\B3\AC\BC\B6\CE\E8\D5\DF" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=15010
add action=mark-connection chain=gamesdown2 comment=\
"\B7\E7\BB\F0\D6\AE\C2\C3" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=20001
add action=mark-connection chain=gamesdown2 comment="\BE\A2\CE\E8\CD\C5" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=25510-25530
add action=mark-connection chain=gamesdown2 comment="QQ\D2\F4\CB\D9" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=28008
add action=mark-connection chain=gamesdown2 comment=\
"\CD\EA\C3\C0\CA\C0\BD\E7\D6\EF\CF\C9,\C8\C8\CE\E8\C5\C9\B6\D3" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
29000
add action=mark-connection chain=gamesdown2 comment=\
"\B5\D8\CF\C2\B3\C7\D3\EB\D3\C2\CA\BF" disabled=no new-connection-mark=\
gamesdown2 passthrough=yes protocol=tcp src-port=10010-10060
add action=mark-connection chain=gamesdown2 comment="" disabled=yes \
new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=7103
add action=mark-connection chain=gamesdown2 comment=CF disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
10008
add action=mark-connection chain=gamesdown2 comment="" disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=udp src-port=\
12010-12190
add action=mark-connection chain=gamesdown2 comment=QQ disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=udp src-port=8000
add action=mark-connection chain=gamesdown2 comment="QQ\EC\C5\CE\E8" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=31414
add action=mark-connection chain=gamesdown2 comment="QQ\B7\C9\B3\B5" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=39311
add action=mark-connection chain=gamesdown2 comment="\D1\B0\CF\C9" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
15002
add action=mark-connection chain=gamesdown2 comment="\D3\CE\CF\B72" disabled=\
no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
38112
add action=mark-connection chain=gamesdown2 comment=\
"\C3\CE\BB\C3\CE\F7\D3\CE" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=10616,22288
add action=mark-connection chain=gamesdown2 comment=winbox disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=8291
add action=mark-connection chain=gamesdown2 comment=\
"QQ\B6\D4\D5\BD\C6\BD\CC\A8" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=udp src-port=1671
add action=mark-connection chain=gamesdown2 comment=\
"\BA\C6\B7\BD\B6\D4\D5\BD\C6\BD\CC\A8" disabled=no new-connection-mark=\
gamesdown2 passthrough=yes protocol=udp src-port=1509-1513
add action=mark-connection chain=gamesdown2 comment=QQbattle disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=udp src-port=\
7000,7100
add action=mark-connection chain=gamesdown2 comment=\
"\BD\A3\CF\C0\C7\E9\D4\B5" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=6660-6672
add action=mark-connection chain=gamesdown2 comment=\
"\BD\A3\CF\C0\C7\E9\D4\B53" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=16763
add action=mark-connection chain=gamesdown2 comment="" disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=udp src-port=\
16763
add action=mark-connection chain=gamesdown2 comment="" disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=tcp src-port=\
3112-3115
add action=mark-connection chain=gamesdown2 comment="\B7\E2\C9\F1\B0\F12" \
disabled=no new-connection-mark=gamesdown2 passthrough=yes protocol=tcp \
src-port=8888
add action=mark-connection chain=gamesdown2 comment=\
"\B4\F3\BB\B0\CE\F7\D3\CE" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=tcp src-port=3488
add action=mark-connection chain=gamesdown2 comment=\
"\B4\F3\CC\C6\B7\E7\D4\C6" disabled=no new-connection-mark=gamesdown2 \
passthrough=yes protocol=udp src-port=31001
add action=mark-connection chain=gamesdown2 comment=icmp disabled=no \
new-connection-mark=gamesdown2 passthrough=yes protocol=icmp
add action=mark-packet chain=gamesdown2 comment="" connection-mark=gamesdown2 \
disabled=no new-packet-mark=games_down_p2 passthrough=no